WEBSITE PRIVACY POLICY

1. Introduction This policy applies to the company “Barbara Jarosz,” which is the Data Controller for personal data collected through its website.

Barbara Jarosz, Kefallinias 5, 1901 Artemida “Barbara Jarosz” is committed to being transparent about the personal information collected when you use our website and other services. This Privacy Policy outlines “Barbara Jarosz’s” commitment to protecting personal data and how it applies regarding the collection, use, transfer, and retention of this data. This policy applies when we determine the purposes and means of processing, acting as a data controller.

2. Collection of Personal Data “Barbara Jarosz” has designed a standardized contact form on its website to facilitate communication with interested parties. This form is used for any inquiries or requests and directs them to the appropriate department or staff member. To manage and respond to your inquiries or requests, we may collect and store your full name, email address, address, contact details, and any other information you may have provided. This information is strictly used to respond satisfactorily to your inquiries or requests and will not be disclosed to third parties except those mentioned in this policy or where disclosure is required or permitted by law.

“Barbara Jarosz” provides the option to register for its website’s online services so users can make purchases. In this case, “Barbara Jarosz” may collect and store your full name, email address, address, contact details, and any other information you may have provided. This information is strictly used to fulfill your order request and will not be disclosed to third parties except those mentioned in this policy or where disclosure is required or permitted by law. “Barbara Jarosz” has implemented a service interface with banks or other providers to meet the needs of users who wish to complete their purchases via credit card or PayPal. In this case, we inform you that “Barbara Jarosz” does not retain any information entered by the user after being redirected to the service provider’s website. Finally, through our website, we collect and process basic contact details with you (name, home address, phone number, email) to manage and improve our relationship through promotional or non-promotional content updates, offering facilities and benefits, participation in promotional activities, corporate social responsibility initiatives, or events we organize, as well as providing the option to subscribe to “Barbara Jarosz’s” newsletter. Except for email messages following purchases, the legal basis for processing your above data is your explicit consent, provided through a separate declaration on the website, which you can revoke at any time. Specifically concerning email messages or the “Barbara Jarosz” newsletter, there is also the option to unsubscribe through the body of the email received by the user. For the lawful processing of your data under Regulation (EU) 2016/679, we recognize a lawful basis before processing personal data. In the above cases, the lawful basis for processing personal data is your explicit consent for processing, given when submitting each form, only if you agree with this policy. This policy refers to the use of information we collect from you when browsing our website. Other websites that may be accessible from ours have their own policies regarding the practices they follow. If you are redirected to one of these, we encourage you to read them. We only use trusted partners and providers, but we clarify that we are not responsible for the policies or practices followed on other websites.

3. Use of Collected Data We will use the information we collect for some of the following purposes:

• to register you for a Service.
• to provide a Service you have requested.
• for advertising purposes, such as providing customized advertisements, advertiser content, and sending promotional communications, after giving your separate consent where required.
• to ask for your opinion about our products and services and to conduct customer surveys, after giving your separate consent where required.
• to understand how consumers use our Services and products, to improve them and develop new products and services.
• to conduct prize draws, promotions, or prize contests, as permitted by law, and
• for other purposes, provided we recognize a lawful basis for processing your data.

“Barbara Jarosz” processes personal data for the purposes described above. The legal framework for processing personal data by “Barbara Jarosz” includes processing necessary to perform a contract between you and “Barbara Jarosz” (e.g., for purchasing products, for providing Services to you, for identification and identity verification, to allow you to use certain Services), necessary for compliance with legal requirements (e.g., for compliance with applicable accounting rules and mandatory disclosures to law enforcement authorities), necessary for “Barbara Jarosz’s” legitimate interests (e.g., to manage our relationship with you and improve the relevance of communication, customer experience, and service), and based on the consent of our customers (e.g., to communicate with you about our products and services and provide you with marketing information), which can later be withdrawn at any time by contacting us as provided in the “Contact” section of this Privacy Policy without affecting the legality of the processing based on consent before its withdrawal.

4. Transfer of Personal Data Data collected when browsing our website is stored and processed within the European Economic Area (EEA), but it may need to be transferred and processed in a country outside the EEA. Any such transfer of personal data will always be in compliance with applicable law.

“Barbara Jarosz” may disclose personal data collected from the website to partners, suppliers, service providers, subcontractors, or third-party processors to the extent reasonably necessary for our operations. Such transfers will be exclusively for the purposes and conditions provided in this policy and will be protected, where required, by appropriate measures and contractual clauses in accordance with applicable data protection law. Within the context of promotional activities and based on your consent on our website, we may transfer your personal data to advertising service providers and/or advertising measurement services, administrators of electronic communication, and social media platforms. Additionally, we may disclose personal data where such disclosures are necessary for compliance with a legal obligation to which we are subject. Finally, if we need to transfer personal data to third parties, “Barbara Jarosz” is committed to obtaining your consent if another lawful basis has not been identified.

5. Retention of Personal Data “Barbara Jarosz” is committed to not retaining personal data for longer than necessary and will ensure that we delete it securely. For additional information on retention periods and deletion, please refer to the Contact section.
6. Data Subject Rights In this section, “Barbara Jarosz” addresses the rights deriving from Regulation (EU) 2016/679 and how data subjects can access these rights. For further clarification or to exercise your rights, please refer to the Contact section.

6.1 Right of Access Individuals can access their personal data that we collect and process. “Barbara Jarosz” considers that personal data collected directly from subjects will be accurate and complete. 6.2 Right to Rectification and Erasure Data subjects may request the update, deletion, or removal of any information held about them, and any third party processing or using the data must also comply with this request. A deletion request may only be rejected if an exemption applies. “Barbara Jarosz” is obligated to delete personal data when one of the following applies:

• The personal data is no longer necessary for the purposes for which it was collected or processed.
• The data subject withdraws consent, and there is no other lawful basis for processing.
• The data subject objects to processing conducted based on the Data Controller’s legitimate interests, and there are no other overriding lawful grounds for processing.
• The personal data has been unlawfully processed.

If a request for the deletion of personal data is received, identification has been confirmed, the request meets one of the above requirements, and there is no lawful ground opposing the processing, “Barbara Jarosz” must delete the relevant data in its entirety. The request will be recorded in the Data Subjects’ Request Log. If “Barbara Jarosz” cannot delete personal data, it will ensure that:

• The data is not or will not be used to justify any decision about an individual or in any way affect that individual.
• No other organization has access to the personal data.
• The personal data is protected with appropriate technical and organizational security, and it is committed to the permanent deletion of the information if or when it becomes available.

6.3 Right to Restriction of Processing The data subject has the right to request that the controller restrict the processing of their data, where, apart from storage, no other processing occurs. 6.4 Right to Object The data subject has the right to object at any time, for reasons related to their particular situation, to the processing of personal data concerning them. 6.5 Right to Data Portability Upon request, the data subject has the right to receive a copy of their personal data in a structured format. These requests must be processed within one month, provided that there is no excessive burden and does not compromise the privacy of individuals. A data subject may also request that their data be transferred directly to another system. This request must be fulfilled free of charge. If “Barbara Jarosz” cannot fully respond to this request within 30 days, the GDPR compliance team must nonetheless provide the following information to the Data Subject or their legally authorized representative within the specified timeframe:

• A confirmation of receipt of the request.
• Any information identified so far.
• Details of any information or amendments requested that will not be provided to the data subject, the reason(s) for the refusal, and any available procedures for contesting the decision.
• An estimated date by which the remaining responses will be provided.
• An estimate of any costs to be paid by the data subject (e.g., where the request is excessive in nature).
• The name and contact information of the responsible individual.

7. Amendments If “Barbara Jarosz” chooses to change this Privacy Policy, we will post the changes here. Where the changes are significant